Vulnerability Database - OSV

CLEANSTART-2026-SO98691

CleanStart/opentofu

Security fix for GHSA-r92c-9c7f-3pj8 applied in: opentofu 1.11.4-r0 08 Oct

Fix available
Severity - 3.1 (Low)

MINI-mv5w-gjh7-wx55

MinimOS/opentofu-fips-1.10

See record for full details 04 Oct

No fix available

MINI-qrv2-h899-g823

MinimOS/opentofu-1.10

See record for full details 04 Oct

No fix available

CLEANSTART-2026-MI15449

CleanStart/opentofu-fips

Security fix for GHSA-r92c-9c7f-3pj8 applied in: opentofu-fips 1.11.4-r0 18 Sep

Fix available
Severity - 3.1 (Low)

CVE-2026-74797

github.com/opentofu/opentofu

OpenTofu before 1.11.4 Denial of Service via malicious zip 16 Aug

Fix available
Severity - 2.3 (Low)

GO-2026-4352

Go/github.com/opentofu/opentofu

OpenTofu has High CPU usage in "tofu init" with maliciously-crafted module packages in .zip format in github.com/opentofu/opentofu 02 Feb

Fix available

CGA-38r8-9cf5-xp9p

Chainguard/opentofu-1.9
Wolfi/opentofu-1.9

See record for full details 22 Jan

No fix available
Severity - 3.1 (Low)

CGA-2hjj-wjcr-hfrw

Chainguard/opentofu-1.9
Wolfi/opentofu-1.9

See record for full details 22 Jan

No fix available
Severity - 3.1 (Low)

CGA-6vrc-rcw9-3jvg

Chainguard/opentofu-fips-1.8

See record for full details 22 Jan

No fix available
Severity - 3.1 (Low)

CGA-2232-3vvw-jxc4

Chainguard/opentofu-fips-1.8

See record for full details 22 Jan

No fix available
Severity - 3.1 (Low)

CGA-wqj7-ccvv-p29v

Chainguard/opentofu-1.8

See record for full details 22 Jan

No fix available
Severity - 3.1 (Low)

CGA-7qpw-vg3v-mx93

Chainguard/opentofu-1.8

See record for full details 22 Jan

No fix available
Severity - 3.1 (Low)

CGA-wcfq-j92v-pwg5

Chainguard/opentofu-fips-1.9

See record for full details 22 Jan

No fix available
Severity - 3.1 (Low)

CGA-29fj-w92p-qr7m

Chainguard/opentofu-fips-1.9

See record for full details 22 Jan

No fix available
Severity - 3.1 (Low)

CGA-xx7r-qrjv-h4gh

Chainguard/opentofu-1.11
Wolfi/opentofu-1.11

See record for full details 22 Jan

Fix available
Severity - 3.1 (Low)

CGA-wv3r-g6mj-8m89

Chainguard/opentofu-1.11
Wolfi/opentofu-1.11

See record for full details 22 Jan

Fix available
Severity - 3.1 (Low)